[Bug 273924] pf Logging Issue: Missing NAT and RDR Translation Details in pflog

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=273924

Franco Fichtner <franco@opnsense.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |franco@opnsense.org

--- Comment #2 from Franco Fichtner <franco@opnsense.org> ---
pflog simply logs matching packages causing a rule to trigger and does not emit
rule metadata, because the reference to the rule is in the pflog header.

Since
https://cgit.freebsd.org/src/commit/sys/netpfil/pf?id=8e496ea1df1f00ea7832eb41754dbbb56dd244c8
the nat rules are logged separately from the filter rule and that's
pre-rewrite. The filter rule log will match post-write. It gives you an idea of
how the address was rewritten, but only if you compare the two packet headers.


Cheers,
Franco

-- 
You are receiving this mail because:
You are the assignee for the bug.